additional subnet in existing Ipsec tunnel

[TJNIHAL]

Dear all,

Kindly see the attached image "red line is my problem"

remote worker are not able to access my on-premises devices

actually one IPsec tunnel is connected to azure network 

How do i edit the existing IPsec tunnel to provide access for remote users

Thanks in Advance

Nihal

[ede_pfau]

Depends on how much control you have over the AWS VPN setup. I personally would create a dial-in VPN on the FGT and direct remote worker's FortiClient to the public IP of the FGT, bypassing the existing tunnel. If you want your remote workers to have access to the AWS servers, allow that in a policy from one tunnel to the other on the FGT.